简体中文

1.5.0-beta.4 (2026-09-18)

This pre-release reworks the install page: before installing you can see which directives and GM capabilities ScriptCat will not honour, an update highlights only the permissions that actually changed, and the code can be viewed full screen. New-script templates are now customisable per script type. It also removes the message size limit that blocked large scripts and resources, and fixes Firefox sandbox compatibility, script resource classification, and a batch of install / update issues.

🚀 Major New Features

• ✨ The install page now flags directives, values and GM capabilities that are declared but have no effect in ScriptCat, and marks the ones that are ScriptCat-only #1713 (#1742) (by @CodFrm)
• ✨ When updating a script, permissions are shown as a diff against the installed version with unchanged entries collapsed; the permanent security warning banner is removed #1716 (#1732) (by @CodFrm)
• ✨ New-script templates can be customised per type (normal / background / scheduled) under Settings → Developer Tools → Script Templates, with variables such as {{name}}, {{match}} and {{date:YYYY-MM-DD}} #1722 (#1731) (by @CodFrm)
• ✨ Added a full-screen view for the script code on the install page (#1743) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Fixed large scripts and large resources failing to install or load because of the message size limit (#1745) (by @cyfung1031)
• 🐛 Fixed split-realm sandbox compatibility for @inject-into content scripts on Firefox #1701 (#1706) (by @cyfung1031)
• 🐛 Fixed script resource classification and the page resource permission boundary, so @resource / @require-css / @require no longer leak into each other (#1686) (by @cyfung1031)
• 🐛 Fixed @run-at context-menu: a run-at override set in the script settings was lost after re-registration, the menu item failed to register, and the script's own GM_registerMenuCommand was blocked #1649 (#1718) (by @CodFrm)
• 🐛 Fixed script injection silently failing on Edge Dev #1724 (#1725) (by @mikemikimike)
• 🐛 The batch update page no longer closes itself on a countdown; an expired check record now triggers an automatic re-check and continues with the remaining entries #1715 (#1720) (by @CodFrm)
• 🐛 Opening update details from the batch update page now reuses the cached check result instead of refetching, and blocks repeated clicks (#1719) (by @CodFrm)
• 🐛 Fixed sync failing against S3 endpoints that carry a path prefix (such as Supabase) #1723 (#1729) (by @CodFrm)
• 🐛 Fixed script MIME type compatibility so a .user.js served as application/x-javascript also opens the install page #1730 (#1736) (by @cyfung1031)

⚡️ Performance Improvements

• ⚡️ Compressed the DNR output compiled from user network rules, merging same-kind response headers into a single rule (#1733) (by @cyfung1031)

🎨 UI Improvements

• 💄 Fixed an incorrect overflow-hidden style (#1746) (by @cyfung1031)

Full changelog: Compare v1.5.0-beta.3...v1.5.0-beta.4

简体中文

1.5.0-beta.3 (2026-09-01)

This pre-release introduces Network Rules (DNR), which can strip CSP and other response headers, rewrite request/response headers, and block or redirect requests on a per-domain basis. Popup site-scope actions are now always available and reversible, and several Firefox sandbox, Popup script list, and multi-device sync ordering issues are fixed.

🚀 Major New Features

• ✨ Added Network Rules (DNR): strip CSP / X-Frame-Options and other response headers, rewrite request and response headers, block or redirect requests on matched domains, with scenario templates, rule ordering, bulk actions, quota hints, and match testing (#1598) (by @cyfung1031)
• ✨ Popup site-scope actions are now always available; "Exclude on X" now removes the site from @match where possible instead of always writing an @exclude rule (#1696) (by @CodFrm)

🔒 Security Improvements

• 🔒 Restricted Agent OPFS write operations to the workspace directory, and added rename and move support #1572 (#1578) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Fixed the Firefox @inject-into content script sandbox missing EventTarget methods, leaking a self-reference, and having interface objects stripped (#1692) (#1697) (by @CodFrm)
• 🐛 Fixed the Popup "scripts globally disabled" notice showing inconsistently while the current-page script list stayed empty (#1694) (by @CodFrm)
• 🐛 Fixed false positives in the Popup "scripts running on this page" list: non-runnable pages are filtered out and iframe scripts are shown again #1687 (#1689) (by @CodFrm)
• 🐛 Fixed script ordering getting scrambled when syncing across multiple devices #1682 (#1690) (by @CodFrm)
• 🐛 Fixed the "new script" button click being swallowed by its hover menu; it now creates a user script directly #1699 (#1704) (by @CodFrm)

🎨 UI Improvements

• 💄 Unified the three desktop and mobile list pages into responsive list rows, fixing script names being squeezed out in narrow windows #1698 (#1709) (by @CodFrm)
• 💄 When the menu expand count is 0, the expanded Popup menu now appears before Edit / Script settings (#1688) (by @CodFrm)

Others

• 🔧 Update-check failure logs now include the specific URL, making problems easier to diagnose (#1693) (by @cyfung1031)

Full changelog: Compare v1.5.0-beta.2...v1.5.0-beta.3

简体中文

1.5.0-beta.2 (2026-08-21)

This pre-release improves the built-in Agent's conversation, tool-loop, persistence, and MCP reliability, reworks the popup site-scope operations into a reversible state machine, and fixes several cloud-sync and update-page issues.

🚀 Major New Features

• ♻️ Agent conversation, tool-loop, persistence, and MCP reliability improvements #1545 (#1549) (by @cyfung1031)
• ✨ Popup site-scope operations: S1–S4 reversible state machine #1590 (#1666) (by @CodFrm)

🧩 GM API Changes

• 🐛 Fix GM_download not triggering onerror when passed an empty url (#1619) (by @cyfung1031)

🎨 UI Improvements

• 💄 Update-page / install-page / editor UX fixes, and correct update records overwritten by stale check snapshots #1650 #1648 #1651 (#1677) (by @CodFrm)

🐛 Bug Fixes

• 🐛 Cloud sync no longer triggers on service-worker cold starts; alarm period changed to 30 minutes #1670 (#1678) (by @CodFrm)
• 🐛 Fix the install/update page not closing properly #1669 (#1675) (by @CodFrm)

Full changelog: Compare v1.5.0-beta.1...v1.5.0-beta.2

简体中文

1.5.0-beta.1 (2026-08-06)

This pre-release highlights two major features — External Access (MCP bridge) and a script recycle bin — officially supports Firefox MV3, adds Korean, Turkish, and Brazilian Portuguese, and fixes a number of GM API, cloud-sync, and editor issues.

🚀 Major New Features

• 💥 New "External Access (MCP bridge)": a local sctl daemon unifies CLI and MCP-client access; every script read/write is gated by tiered authorization and a human confirmation page with three levels — Deny / Allow / Allow this session — and every operation is audited (#1573) (by @cyfung1031)
• 💥 Script recycle bin: deleted scripts go to the recycle bin first, with restore (preserving the original data and permissions), permanent delete, and expiry-based auto-cleanup; the retention period is configurable (default 30 days, or never) (#1585) (by @CodFrm)
• 💥 Official Firefox MV3 support, with improved sandbox/offscreen communication (#1561) (by @cyfung1031)
• ✨ Add quick site-scope actions to the popup (#1646) (by @CodFrm)
• ✨ Popup script-list expand count is now configurable, separate from the menu expand count (#1645) (by @CodFrm)
• ✨ Icon service gains a "disabled" tier to fully turn off favicon fetching (#1637) (by @CodFrm)
• ✨ Undefined metadata tags now show a warning in the editor (#1608) (by @cyfung1031)
• ✨ Backup/restore/import completeness: ScriptCat/Tampermonkey/Violentmonkey custom config + settings backup + resource repair (#1554) (by @CodFrm)

♻️ Refactoring & Compatibility

• ♻️ Refactor the client onto the official MCP SDK (#1643) (by @CodFrm)

🐛 Bug Fixes

• 🐛 Fix GM_xmlhttpRequest custom cookies being appended instead of overriding same-name cookies (#1604) (by @cyfung1031)
• 🐛 Fix script-sync state consistency and provider-safe conflict handling (#1504) (by @cyfung1031)
• 🐛 Fix scheduled log cleanup no longer working (#1599) (by @CodFrm)
• 🐛 Fix missing context-menu run timing in script settings (#1652) (by @CodFrm)
• 🐛 Fix install-page back/close-tab logic (#1594) (by @cyfung1031)
• 🐛 Fix browser tab title not updating after renaming a saved script (#1607) (by @cyfung1031)
• 🐛 Fix window.focus focus behavior and harden windowId validation (#1577) (by @cyfung1031)
• 🐛 Fix the editor's active-tab close button being hidden #1556 (by @CodFrm)
• 🐛 Fix the navigation guard for unsaved editor content (#1656) (by @CodFrm)
• 🐛 Fix the recycle-bin same-name script save confirmation wording (#1622) (by @CodFrm)
• 🐛 selfMetadata supports empty overrides: fix match/exclude/tag/run-at "delete then revive" (#1579) (by @CodFrm)

🎨 UI Improvements

• 💄 Fix Android UI adaptation: dynamic viewport height + narrow-screen table/settings-row/log-stat-bar reflow (#1636) (by @RenjiYuusei)
• 💄 Add a compact layout option to the popup (#1551) (by @cyfung1031)

🌐 Internationalization

• 🌐 Add Korean (ko-KR) translation (#1568) (by @moduvoice)
• 🌐 Add Turkish (tr-TR) translation (#1557) (by @azizaktas)
• 🌐 Add Brazilian Portuguese (pt-BR) translation (#1587) (by @Lucas559-noob)
• 🌐 Fill in chrome.i18n messages.json and Monaco editor languages for pt-BR / tr-TR (#1605) (by @CodFrm)

Others

• ⬆️ Upgrade dependencies (incl. TypeScript 6.0) and fix pnpm audit warnings (#1576, #1567) (by @cyfung1031)
• Script-sync settings now save instantly (#1615) (by @CodFrm)
• 📝 Improve the store description and README tagline for better "user script" discoverability (#1553) (by @CodFrm)

Full changelog: Compare v1.5.0-beta...v1.5.0-beta.1

简体中文

1.5.0-beta (2026-07-08)

This pre-release brings a brand-new UI with a cleaner, more consistent interface and a smoother overall experience, along with dedicated design optimizations for mobile so mobile users get a great experience too. In addition, it adds new-script-type selection in the editor, a manual download link for local backups, and more, while fixing scheduled-task invalid-timezone and native GM_download cross-origin issues. If you have any suggestions about the new UI/UX, feel free to join the discussion on GitHub.

🎨 UI Improvements

• ♻️ Brand-new UI: a full interface rewrite, with improved mobile adaptation for a better experience on both desktop and mobile (#1514) (by @CodFrm)

🚀 Major New Features

• ✨ Editor tab-bar "＋" now supports choosing the new script type (#1544) (by @cyfung1031)
• ✨ Add a manual download link for local backups (#1543) (by @cyfung1031)
• ✨ Enable structured_clone serialization for extension messaging on Chromium 148+ (#1534) (by @cyfung1031)
• ✨ Pre-release (beta) versions now auto-open the changelog page after an update (by @CodFrm)

🧩 GM API Changes

• 🐛 Make native GM_download honor @connect, like GM_xmlhttpRequest (#1506) (by @DudeAint)

⚡️ Performance Improvements

• ⚡️ Optimize script loading cache and fix leftover Popup menu items (#1511) (by @cyfung1031)

🧑‍💻 Editor

• ♻️ Adjust eslint-plugin-userscripts rules (#1510) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Avoid scheduled-task errors caused by cron auto-detecting an invalid timezone (#1531) (by @cyfung1031)
• 🐛 Fix the unavailable demo API in the crontab example (#1542) (by @cyfung1031)

🌐 Localization

• 🌐 Add Turkish language (by @azizaktas)

Full changelog: Compare v1.4.0-beta.4...v1.5.0-beta

简体中文

1.4.0 (2026-06-26)

This release brings low-level refactoring in preparation for Firefox MV3, along with editor experience improvements (edit menu, Ctrl+Shift+F formatting, Monaco quick fix), multi-platform search engine selection for script discovery, new capabilities such as @unwrap / window.onurlchange / @run-at context-menu, comprehensive hardening of cloud storage sync reliability, and a large batch of GM API, UI, and stability fixes (including a long-running memory leak and prototype pollution security vulnerabilities). The ScriptCat AI Agent is available as a preview in dev / Beta builds and is not yet enabled in the stable release.

🚀 Major New Features

• 🧪 ScriptCat AI Agent (Preview — available in dev / Beta builds only, not yet enabled in stable) — AI-powered agent system with conversational interaction, tool calling, Skill system, MCP protocol, and more (#1324) (by @CodFrm)
• ✨ Support the @unwrap metadata tag (#1213) (by @cyfung1031)
• ✨ Implement TM's window.onurlchange via the Navigation API (#1315) (by @cyfung1031)
• ✨ Restore @run-at context-menu support (#1442) (by @cyfung1031)
• ✨ Script discovery supports multi-platform search engine selection (#1295) (by @CodFrm)
• ✨ Add more icon service providers (#1333) (by @cyfung1031)
• ✨ Add an update-check icon to the "last updated" column in the script list (#1304) (by @CodFrm)
• ✨ Improve edit-conflict and script-name-conflict handling (#1223) (by @cyfung1031)

🧑‍💻 Editor

• ✨ Add an edit menu to the editor (find, replace, undo, etc.) (#1303) (by @CodFrm)
• ✨ Editor supports Ctrl+Shift+F formatting (#1415) (by @cyfung1031)
• ✨ Improve Monaco quick fix and user-script metadata hints (#1461) (by @cyfung1031)
• 🐛 Fix Ctrl-F / Ctrl-H shortcuts (#1312) (by @cyfung1031)
• 🐛 Fix ESLint fix feature not working #1079 (#1184) (by @cyfung1031)
• 🐛 Fix editor CSS layout issues (#1460) (by @cyfung1031)
• 🐛 Fix ScriptEditor script list display in light theme (#1288) (by @CodFrm)
• 🐛 Fix and improve ScriptEditor issues (#1258) (by @cyfung1031)

⚡️ Performance Improvements

• 🚑 Fix a potential memory leak during long-running ScriptCat sessions (#1401) (by @cyfung1031)
• ⚡️ Remove Baidu filesystem dependency on global DNR rules, switch to per-request cookie disabling (#1377) (by @cyfung1031)
• ⚡️ Optimize multi-platform search engine selection for script discovery (#1379) (by @cyfung1031)
• ⚡️ Use a monospace font for the install page loadingStatus to avoid jitter (#1381) (by @cyfung1031)
• ⚡️ Optimize pushValue handling (#1403) (by @cyfung1031)
• ⚡️ More complete permission checks and better userScript permission hints (#1251) (by @cyfung1031)
• ⚡️ Improve MessageConnect memory management and cleanup mechanism (#1248) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Harden cloud storage sync reliability (Dropbox / WebDAV / Google Drive / OneDrive authentication, path handling, and retry logic) (#1374 ~ #1395) (by @cyfung1031)
• 🐛 Fix multiple cloud sync issues: OneDrive zero-byte upload, Google Drive / OneDrive error normalization, S3 custom metadata modifiedDate (#1405) (#1406) (#1408) (by @cyfung1031)
• 🐛 Remove the WebDAV verify write-probe to avoid false negatives on services with a non-writable root (e.g. Nutstore) (#1445) (by @CodFrm)
• 🐛 Fix cross-origin request failure when site access permission is missing (#1477) (by @cyfung1031)
• 🐛 Fix Edge Android mobile popup adaptation #686 (#1507) (by @CodFrm)
• 🐛 Fix white background flash during initial load #1497 (#1498) (by @cyfung1031)
• 🐛 Fix message connections (GM API / ports) not being cleaned up properly (#1474) (by @cyfung1031)
• 🐛 Fix @match template mismatch when search is missing (#1466) (by @cyfung1031)
• 🐛 Add protoBaseDescs to fix ancestor-class inheritance in the Tampermonkey semi-sandbox (#1463) (by @cyfung1031)
• 🐛 Fix missing null handling for GM_xmlhttpRequest msgConn (#1433) (by @cyfung1031)
• 🐛 Fix GM xhr not handling abnormal onloadend correctly (#1412) (by @cyfung1031)
• 🐛 Fix ScriptEditor list dynamic update and display issues (#1414) (by @cyfung1031)
• 🐛 Fix session rule count issue with concurrent xhr (#1353) (by @cyfung1031)
• 🐛 Fix entire page crash caused by an invalid cron expression (#1327) (by @cyfung1031)
• 🐛 Fix all scripts failing when a single script times out during batch update check (#1265) (by @cyfung1031)
• 🐛 Add extensionEnv handling for isIncognito, userAgent, and run-in (#1368) (by @cyfung1031)
• 🐛 Fix onboarding guide button being partially hidden #1396 (#1398) (by @cyfung1031)
• 🐛 Fix tooltip being obscured on the script management page #1386 (#1387) (by @Xdy1579883916)
• 🐛 Fix Sidebar causing abnormal resizing in card mode #1179 (#1373) (by @cyfung1031)
• 🐛 Fix incorrect origin set when installing local files via drag-and-drop (#1371) (by @cyfung1031)
• 🐛 Fix language switching prompt message (#1380) (by @cyfung1031)
• 🐛 Improve log display UI (#1372) (by @cyfung1031)
• 🐛 Fix UserConfigPanel CSS (#1361) (by @cyfung1031)
• 🐛 Use Object.create(null) for the empty object in create_context (#1397) (by @cyfung1031)
• 🐛 Fix silent update and connect permission logic for subscribed scripts (#1201) (by @cyfung1031)
• 🐛 Fix log page query button not refreshing the time (#1294) (by @CodFrm)

🔒 Security Improvements

• 🔒 Fix prototype pollution via untrusted YAML user-config keys (#1494) (by @qdzsh)
• 🔒 Fix all npm dependency security vulnerabilities (#1350) (#1364) (#1365) (by @cyfung1031)

♻️ Refactoring & Compatibility

• ♻️ Low-level refactoring in preparation for Firefox MV3 adaptation (#1457) (#1480) (by @cyfung1031)
• ♻️ Refactor script resource update logic (updateResource) and concurrency control, restore resource cache compatibility (#1193) (by @cyfung1031)
• ♻️ Replace jszip with JSZipp for ZIP handling (backup import / export), and remove the unused jszip dependency (#1479) (by @cyfung1031)
• ♻️ Unify Offscreen ↔ ServiceWorker communication over the postMessage channel (#1299) (by @CodFrm)
• ♻️ Refactor VSCodeConnect code (#1170) (by @cyfung1031)
• ⚡️ Compress ts.worker.js to 4MB to pass AMO validation, fix MV3 background permission error (#1221) (by @cyfung1031)

🌐 Internationalization

• 🌐 Fix multi-language terminology translations (mainly improving Traditional...

简体中文

1.4.0-beta.4 (2026-06-13)

This release fixes Edge Android mobile popup layout, the white background flash during initial load, and cross-origin request failures when site access permission is missing; patches a prototype pollution vulnerability triggered via untrusted YAML user-config keys; refactors script resource updating and ZIP handling (replacing jszip with JSZipp); and continues to improve Firefox MV3 compatibility and localization.

🧑‍💻 Editor

• ✨ Improve Monaco quick fix and userscript metadata hints (#1461) (by @cyfung1031)
• 🐛 Fix editor CSS layout issues (#1460) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Fix Edge Android mobile popup layout (#686) (#1507) (by @CodFrm)
• 🐛 Fix white background flash during initial load (#1497) (#1498) (by @cyfung1031)
• 🐛 Fix cross-origin request failure when site access permission is missing (#1477) (by @cyfung1031)
• 🐛 Fix message connection (GM API / port) not being cleaned up properly (#1474) (by @cyfung1031)
• 🐛 Fix @match template mismatch when search is missing (#1466) (by @cyfung1031)
• 🐛 Add protoBaseDescs to fix ancestor class inheritance in the Tampermonkey semi-sandbox (#1463) (by @cyfung1031)

🔒 Security Improvements

• 🔒 Fix prototype pollution via untrusted YAML user-config keys (#1494) (by @qdzsh)

♻️ Refactoring & Compatibility

• ♻️ Refactor script resource updating (updateResource) and concurrency control, and restore resource cache compatibility (#1193) (by @cyfung1031)
• ♻️ Replace jszip with JSZipp for ZIP handling (backup import/export), and remove the unused jszip dependency (#1479) (by @cyfung1031)
• ♻️ Improve Firefox MV3 compatibility (#1457, #1480) (by @cyfung1031)

🌐 Localization

• 🌐 Fix multi-language terminology translations (notably improving Traditional Chinese) and add translation terminology guidelines (#1468) (by @cyfung1031)

Full changelog: Compare v1.4.0-beta.3...v1.4.0-beta.4

简体中文

1.4.0-beta.3 (2026-05-19)

Continuing the direction set in beta.2, this release further hardens cloud sync reliability (OneDrive/Google Drive/WebDAV error handling and upload flows), fixes a number of ScriptEditor and GM xhr exception-handling issues, and adds Ctrl+Shift+F formatting and the return of @run-at context-menu.

🚀 Major New Features

• ✨ Editor: Ctrl+Shift+F to format code (#1415) (by @cyfung1031)
• ✨ Bring back @run-at context-menu support (#1442) (by @cyfung1031)

⚡️ Performance Improvements

• ⚡️ Optimize pushValue handling (#1403) (by @cyfung1031)

🐛 Bug Fixes

• 🐛 Cloud sync fixes: OneDrive zero-byte upload, Google Drive/OneDrive error normalization, S3 custom metadata modifiedDate (#1405) (#1406) (#1408) (by @cyfung1031)
• 🐛 WebDAV verify: drop the write probe so services like Jianguoyun with non-writable root no longer fail verification (#1445) (by @CodFrm)
• 🐛 Fix missing null handling for GM_xmlhttpRequest msgConn (#1433) (by @cyfung1031)
• 🐛 Fix GM xhr improperly handling abnormal onloadend (#1412) (by @cyfung1031)
• 🐛 Fix ScriptEditor list dynamic update and display issues (#1414) (by @cyfung1031)
• 🐛 Fix interaction issues with edit-related actions in the ScriptEditor toolbar (#1417) (by @cyfung1031)
• 🐛 Fix chrome.downloads.download code and Mock (#1410) (by @cyfung1031)
• 🐛 Fix closeWindow in src/pages/install/App.tsx (#1435) (by @cyfung1031)
• 🐛 Add wheel event boundary at the root layout to prevent internal scrolling from triggering browser swipe-navigation (#1431) (by @cyfung1031)
• 🐛 Dedupe concurrent initial auth requests (#1437) (by @cyfung1031)
• 🐛 Refactor encoding.ts to consolidate and improve detection (#1426) (by @cyfung1031)
• 🐛 Add Tooltip so the menu is visible (#1429) (by @cyfung1031)
• 🐛 overscroll-behavior fix (#1413) (by @cyfung1031)
• 🐛 Stop showing the update button for scripts that don't support updates (#1418) (by @cyfung1031)
• 🐛 Fix missing i18n key references (#1422) (by @cyfung1031)
• 🐛 Add frames to sandbox createContext, fixing #1427 (#1428) (by @cyfung1031)
• 🐛 Fix SkillScript compilation error from missing isContextMenu field (5fdc8e3) (by @CodFrm)

♻️ Refactoring & Compatibility

• ♻️ Move install resources to chrome.storage.local tempStorage; code part lives in OPFS/temp_install_codes (#1318) (by @cyfung1031)
• ♻️ Fix double-slash created by path-joining logic (#1432) (by @tomaioo)

🌐 Internationalization

• 🌐 Improve Japanese UI translations with companion fixes for other languages (#1419) (#1421) (by @GoodLight999, @cyfung1031)

Full changelog: Compare v1.4.0-beta.2...v1.4.0-beta.3

English

0.16.15 (2026-05-19)

本次更新主要修复了 Firefox 149-152 的 WebExtensions API 兼容性问题（含内容安全策略调整），并修复了 MV2 打包脚本的构建命令。

🐛 Bug 修复

• 🐛 修复 MV2 打包脚本构建命令 #1423 (by @CodFrm)
• 🐛 针对 WebExtensions API Changes (Firefox 149-152) 做修正（含 CSP 调整）(#1448) (by @cyfung1031)

Full changelog: Compare v0.16.14...v0.16.15

简体中文

1.4.0-beta.2 (2026-05-06)

This update focuses on comprehensive cloud storage sync reliability hardening (auth, path handling, and retry fixes for Dropbox/WebDAV/Google Drive/OneDrive backends), Agent tool-call stability improvements, and a large number of UI and script runtime bug fixes including a long-running memory leak.

⚡️ Performance Improvements

• ⚡️ Remove Baidu filesystem dependency on global DNR rules; disable cookies per-request instead (#1377) (by @cyfung1031)
• ⚡️ Optimize multi-platform search engine selection for fetching scripts (#1379) (by @cyfung1031)
• ⚡️ Use monospace for the install page loadingStatus to avoid jitter (#1381) (by @cyfung1031)
• ⚡️ Strengthen Agent prompt reliability — result verification, budget semantics, safety boundaries (#1354) (by @cyfung1031)

🐛 Bug Fixes

• 🚑 Fix potential memory leak when ScriptCat runs for an extended period (#1401) (by @cyfung1031)
• 🐛 Harden cloud sync reliability across backends (Dropbox/WebDAV/Google Drive/OneDrive auth, path handling, retry logic) (#1374) (#1375) (#1376) (#1390) (#1391) (#1392) (#1393) (#1394) (#1395) (by @cyfung1031)
• 🐛 Properly populate extensionEnv with isIncognito (early-start & bgScript), userAgent and run-in for bgScript (#1368) (by @cyfung1031)
• 🐛 Fix onboarding guide button being clipped #1396 (#1398) (by @cyfung1031)
• 🐛 Fix tooltip occlusion on the script management page #1386 (#1387) (by @Xdy1579883916)
• 🐛 Fix Sidebar causing layout sizing issues in card mode #1179 (#1373) (by @cyfung1031)
• 🐛 Fix incorrect origin for local file drag-and-drop installs (#1371) (by @cyfung1031)
• 🐛 Fix language-switch messaging (#1380) (by @cyfung1031)
• 🐛 Improve log display UI (#1372) (by @cyfung1031)
• 🐛 Resolve session rule count issues with concurrent xhr (#1353) (by @cyfung1031)
• 🐛 Fix UserConfigPanel CSS (#1361) (by @cyfung1031)
• 🐛 Use Object.create(null) for empty objects in create_context (#1397) (by @cyfung1031)
• 🐛 Fix Agent streaming tool_call argument concatenation errors and parallel tool-call cross-talk (#1355) (by @cyfung1031)
• 🐛 Fix Agent compatibility with reasoning models (#1357) (by @cyfung1031)
• 🐛 Fix Agent web_fetch/web_search contract inconsistency (7bbd6d1) (by @CodFrm)
• 🐛 Fix missing extension env in Agent skill script runtime (e143c4a) (by @CodFrm)

🔒 Security Improvements

• 🔒 Fix all npm vulnerabilities (#1350) (#1364) (#1365) (by @cyfung1031)

Others

• 🔥 Remove Crowdin and ach-UG pseudo-locale content (#1385) (by @CodFrm)

Full changelog: Compare v1.4.0-beta.1...v1.4.0-beta.2